
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/323430313a353532303a3a2f33322d3332203d3e20313532303332.roa
File: 323430313a353532303a3a2f33322d3332203d3e20313532303332.roa (raw, json)
Hash identifier: dgjaOdjpIeK7j+dAUIzTx198JF2memFCrb9q8a6+v0c=
Subject key identifier: F9:AB:CF:15:11:5A:05:98:A2:65:8E:EF:D3:1A:AB:20:9B:4E:27:1E
Certificate issuer: /CN=88505636AC2C683A0A15AF1041DEF625BB5D7643
Certificate serial: 5EB3FF6553D8DC8CC33ADB1863D7F8BE79B8EC73
Authority key identifier: 88:50:56:36:AC:2C:68:3A:0A:15:AF:10:41:DE:F6:25:BB:5D:76:43
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88505636AC2C683A0A15AF1041DEF625BB5D7643.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/323430313a353532303a3a2f33322d3332203d3e20313532303332.roa
Signing time: Sun 03 May 2026 02:41:42 +0000
ROA not before: Sun 03 May 2026 02:36:42 +0000
ROA not after: Sun 02 May 2027 02:41:42 +0000
asID: 152032
IP address blocks: 2401:5520::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.crl
rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88505636AC2C683A0A15AF1041DEF625BB5D7643.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:b3:ff:65:53:d8:dc:8c:c3:3a:db:18:63:d7:f8:be:79:b8:ec:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88505636AC2C683A0A15AF1041DEF625BB5D7643
Validity
Not Before: May 3 02:36:42 2026 GMT
Not After : May 2 02:41:42 2027 GMT
Subject: CN=F9ABCF15115A0598A2658EEFD31AAB209B4E271E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:8c:db:d5:09:1f:6c:c7:17:de:25:67:32:
f5:8c:da:ee:ad:fc:96:6e:b6:df:d6:03:f5:60:f0:
82:35:8e:9e:95:f4:cd:4c:d7:ed:21:3e:f3:47:bc:
53:9b:f3:d8:69:6e:20:a5:52:3c:74:af:d0:af:2d:
91:ea:56:51:16:2d:ab:7a:65:68:1d:04:a9:de:a9:
77:5b:9d:88:1c:22:7c:31:9e:ca:5c:a8:08:f3:86:
c5:e5:d2:77:a6:4b:f8:23:4b:e4:90:86:cf:5d:3f:
b9:b5:ff:f2:37:32:11:7e:d0:30:6b:e1:95:85:0c:
fb:de:4f:de:c0:4f:de:6b:b0:49:b7:97:93:a8:b1:
ff:1e:ed:a7:8d:f7:af:ee:9b:07:b9:93:dd:63:1c:
77:cb:54:ed:7d:fc:83:9b:80:bc:15:f4:7c:12:74:
c8:19:a5:d4:cc:46:3a:5f:32:77:84:62:aa:58:90:
96:f8:51:5b:21:e0:cb:c4:2d:58:ae:39:de:ef:51:
0d:cf:1a:24:3c:26:78:00:16:88:28:c3:b2:2a:24:
1e:43:7f:8c:99:2f:c3:de:d3:8e:42:5f:79:5e:bb:
d4:8a:e9:44:50:48:33:2c:e4:f5:9e:1a:91:08:e0:
13:d7:b8:02:ae:91:99:84:f1:06:53:c0:e6:27:7a:
18:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AB:CF:15:11:5A:05:98:A2:65:8E:EF:D3:1A:AB:20:9B:4E:27:1E
X509v3 Authority Key Identifier:
keyid:88:50:56:36:AC:2C:68:3A:0A:15:AF:10:41:DE:F6:25:BB:5D:76:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88505636AC2C683A0A15AF1041DEF625BB5D7643.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/323430313a353532303a3a2f33322d3332203d3e20313532303332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:5520::/32
Signature Algorithm: sha256WithRSAEncryption
41:e6:a7:e0:9a:4e:90:ae:18:82:c9:40:09:3d:9c:04:b2:95:
96:4d:d5:73:5b:ac:c6:71:21:8e:fd:25:84:ed:c9:ef:2d:d9:
6e:fa:e9:60:22:9b:4d:4a:c6:be:18:3e:0e:5e:d3:92:04:02:
ed:59:de:75:95:75:70:f1:6e:1a:a6:d8:12:1e:a7:78:ce:80:
88:54:bc:34:a1:d8:7e:89:e5:7c:09:a5:43:ee:80:81:e1:08:
89:64:70:4e:eb:60:e8:32:3c:3f:36:09:f9:a1:84:41:12:f9:
38:97:a0:1b:02:51:77:b8:90:94:0c:b5:55:74:91:e1:ed:c8:
01:c1:13:92:de:f3:bf:f1:b3:ad:c0:74:e7:9e:ae:b6:8d:f4:
a5:77:f9:2d:39:96:e8:1e:b0:b1:99:2e:e2:b1:7b:43:64:35:
b2:5f:b8:50:3d:39:4c:0c:e5:96:aa:94:b1:c5:37:6f:fc:67:
9b:32:a2:be:04:81:45:37:a1:68:77:64:18:1e:51:2a:2e:4c:
b8:c2:6a:b0:4f:e2:08:d0:3f:a0:13:51:34:5b:e9:ed:cb:85:
46:45:f0:fe:3a:e2:1a:82:da:6c:64:fe:30:0d:e6:eb:23:72:
3a:22:33:5a:e3:d3:90:08:d9:5e:dd:fe:04:57:7c:42:e5:84:
2b:77:8a:e2
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUXrP/ZVPY3IzDOtsYY9f4vnm47HMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg1MDU2MzZBQzJDNjgzQTBBMTVBRjEwNDFERUY2MjVC
QjVENzY0MzAeFw0yNjA1MDMwMjM2NDJaFw0yNzA1MDIwMjQxNDJaMDMxMTAvBgNV
BAMTKEY5QUJDRjE1MTE1QTA1OThBMjY1OEVFRkQzMUFBQjIwOUI0RTI3MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCskYzb1QkfbMcX3iVnMvWM2u6t
/JZutt/WA/Vg8II1jp6V9M1M1+0hPvNHvFOb89hpbiClUjx0r9CvLZHqVlEWLat6
ZWgdBKneqXdbnYgcInwxnspcqAjzhsXl0nemS/gjS+SQhs9dP7m1//I3MhF+0DBr
4ZWFDPveT97AT95rsEm3l5Oosf8e7aeN96/umwe5k91jHHfLVO19/IObgLwV9HwS
dMgZpdTMRjpfMneEYqpYkJb4UVsh4MvELViuOd7vUQ3PGiQ8JngAFogow7IqJB5D
f4yZL8Pe045CX3leu9SK6URQSDMs5PWeGpEI4BPXuAKukZmE8QZTwOYnehhvAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQU+avPFRFaBZiiZY7v0xqrIJtOJx4wHwYDVR0j
BBgwFoAUiFBWNqwsaDoKFa8QQd72JbtddkMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmU1ZmRmNmMtMGQwMS00OTJiLTgwMDQtYTQ4ZWU1YTEyNDc0LzAvODg1MDU2MzZB
QzJDNjgzQTBBMTVBRjEwNDFERUY2MjVCQjVENzY0My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84ODUwNTYzNkFDMkM2ODNBMEExNUFGMTA0MURFRjYyNUJCNUQ3
NjQzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZlNWZkZjZjLTBkMDEtNDkyYi04
MDA0LWE0OGVlNWExMjQ3NC8wLzMyMzQzMDMxM2EzNTM1MzIzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMxMzUzMjMwMzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQBVSAwDQYJKoZI
hvcNAQELBQADggEBAEHmp+CaTpCuGILJQAk9nASylZZN1XNbrMZxIY79JYTtye8t
2W766WAim01Kxr4YPg5e05IEAu1Z3nWVdXDxbhqm2BIep3jOgIhUvDSh2H6J5XwJ
pUPugIHhCIlkcE7rYOgyPD82CfmhhEES+TiXoBsCUXe4kJQMtVV0keHtyAHBE5Le
87/xs63AdOeerraN9KV3+S05lugesLGZLuKxe0NkNbJfuFA9OUwM5ZaqlLHFN2/8
Z5syor4EgUU3oWh3ZBgeUSouTLjCarBP4gjQP6ATUTRb6e3LhUZF8P464hqC2mxk
/jAN5usjcjoiM1rj05AI2V7d/gRXfELlhCt3iuI=
-----END CERTIFICATE-----
Generated at Wed May 13 19:42:08 2026 by rpki-client